← Back

CVE-2024-22269

nvd nist
Published: May 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.0
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Exploitability: 1.5 / Impact: 4.0
Source: NVD

Description

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

Affected (2)

Vmware
2 products
Workstation
Fusion
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Workstation
From 17.0.0 to 17.5.2
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 13.0.0 to 13.5.2
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.